Skip to content

Commit 8d1a0b9

Browse files
committed
[AzureAD] Freshness updates for user settings article
1 parent 65f502e commit 8d1a0b9

File tree

1 file changed

+24
-22
lines changed

1 file changed

+24
-22
lines changed
Lines changed: 24 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
---
2-
title: Manage users and devices Azure MFA - Azure Active Directory
3-
description: How can administrators change user settings such as forcing the users to do the proof-up process again.
2+
title: Manage user settings for Azure Multi-Factor Authentication - Azure Active Directory
3+
description: Learn how you can configure Azure Active Directory user settings for Azure Multi-Factor Authentication
44

55
services: multi-factor-authentication
66
ms.service: active-directory
77
ms.subservice: authentication
88
ms.topic: how-to
9-
ms.date: 11/21/2019
9+
ms.date: 04/13/2020
1010

1111
ms.author: iainfou
1212
author: iainfoulds
@@ -15,44 +15,46 @@ ms.reviewer: michmcla
1515

1616
ms.collection: M365-identity-device-management
1717
---
18-
# Manage user settings with Azure Multi-Factor Authentication in the cloud
18+
# Manage user settings for Azure Multi-Factor Authentication
1919

2020
As an administrator, you can manage the following user and device settings:
2121

2222
* Require users to provide contact methods again
2323
* Delete app passwords
2424
* Require MFA on all trusted devices
2525

26-
## Manage authentication methods
26+
## Manage user authentication options
2727

28-
As an administrator assigned the Authentication Administrator role you can require users to reset their password, re-register for MFA, or revoke existing MFA sessions from their user object.
28+
If you're assigned the *Authentication Administrator* role you can require users to reset their password, re-register for MFA, or revoke existing MFA sessions from their user object. These actions may be necessary if you need to provide assistance to a user, or want to reset their security status.
2929

30-
![Manage authentication methods from the Azure portal](./media/howto-mfa-userdevicesettings/manage-authentication-methods-in-azure.png)
30+
To manage user settings, complete the following steps:
3131

3232
1. Sign in to the [Azure portal](https://portal.azure.com).
3333
1. On the left, select **Azure Active Directory** > **Users** > **All users**.
34-
1. Choose the user you wish to perform an action on and select **Authentication methods**.
35-
- **Reset Password** will reset the user's password and assign a temporary password that must be changed on the next sign in.
36-
- **Require Re-register MFA** will make it so that when the user signs in next time, they will be requested to setup a new MFA authentication method.
37-
- **Revoke MFA Sessions** clears the user's remembered MFA sessions and requires them to perform MFA the next time it is required by the policy on the device.
34+
1. Choose the user you wish to perform an action on and select **Authentication methods**. At the top of the window, then choose one of the following options for the user:
35+
- **Reset Password** resets the user's password and assigns a temporary password that must be changed on the next sign-in.
36+
- **Require Re-register MFA** makes it so that when the user signs in next time, they're requested to set up a new MFA authentication method.
37+
- **Revoke MFA Sessions** clears the user's remembered MFA sessions and requires them to perform MFA the next time it's required by the policy on the device.
38+
39+
![Manage authentication methods from the Azure portal](./media/howto-mfa-userdevicesettings/manage-authentication-methods-in-azure.png)
3840

3941
## Delete users existing app passwords
4042

41-
This setting deletes all of the app passwords that a user has created. Non-browser apps that were associated with these app passwords stop working until a new app password is created. Global administrator permissions are required to perform this action.
43+
If needed, you can delete all of the app passwords that a user has created. Non-browser apps that were associated with these app passwords stop working until a new app password is created. *Global administrator* permissions are required to perform this action.
4244

43-
### How to delete users existing app passwords
45+
To delete a user's app passwords, complete the following steps:
4446

4547
1. Sign in to the [Azure portal](https://portal.azure.com).
46-
2. On the left, select **Azure Active Directory** > **Users** > **All users**.
47-
3. On the right, select **Multi-Factor Authentication** on the toolbar. The multi-factor authentication page opens.
48-
4. Check the box next to the user or users that you wish to manage. A list of quick step options appears on the right.
49-
5. Select **Manage user settings**.
50-
6. Check the box for **Delete all existing app passwords generated by the selected users**.
48+
1. On the left-hand side, select **Azure Active Directory** > **Users** > **All users**.
49+
1. Select **Multi-Factor Authentication**. You may need to scroll to the right to see this menu option. Select the example screenshot below to see the full Azure portal window and menu location:
50+
[![](media/howto-mfa-userstates/selectmfa-cropped.png "Select Multi-Factor Authentication from the Users window in Azure AD")](media/howto-mfa-userstates/selectmfa.png#lightbox)
51+
1. Check the box next to the user or users that you wish to manage. A list of quick step options appears on the right.
52+
1. Select **Manage user settings**, then check the box for **Delete all existing app passwords generated by the selected users**, as shown in the following example:
5153
![Delete all existing app passwords](./media/howto-mfa-userdevicesettings/deleteapppasswords.png)
52-
7. Click **save**.
53-
8. Click **close**.
54+
1. Select **save**, then **close**.
5455

5556
## Next steps
5657

57-
- Get more information about how to [Configure Azure Multi-Factor Authentication settings](howto-mfa-mfasettings.md)
58-
- If your users need help, point them towards the [User guide for two-step verification](../user-help/multi-factor-authentication-end-user.md)
58+
This article helped configure individual user settings. To configure Azure Multi-Factor Authentication service settings, see [Configure Azure Multi-Factor Authentication settings](howto-mfa-mfasettings.md)
59+
60+
If your users need help, see the [User guide for Azure Multi-Factor Authentication](../user-help/multi-factor-authentication-end-user.md).

0 commit comments

Comments
 (0)